We use your data solely to operate the Service: authenticating you, storing and displaying your ledger, syncing and categorizing linked bank transactions (including automated categorization, which may use AI), calculating totals and projections, processing your subscription, and communicating with you about your account (e.g., trial ending, payment issues). We do not sell your data to third parties or use it for third-party advertising.
If you choose to connect a bank or credit card account, that connection is established and authenticated directly between you and Plaid, Inc. ("Plaid") — a regulated financial data network used by thousands of banking and finance apps. Plaid retrieves your account and transaction data from your financial institution and shares it with NextUp BillPay on a read-only basis. We cannot move money, and we never see or store the login credentials you use with your bank or with Plaid.
Bank access credentials issued to us by Plaid are encrypted at rest and can only be decrypted by trusted backend systems — never by end users or exposed in your browser. You can disconnect a linked account at any time from your dashboard; doing so revokes NextUp BillPay's access with Plaid immediately.
Plaid's own handling of your data is governed by its End User Privacy Policy, available at plaid.com/legal.
Your account and ledger data are stored in a managed Postgres database (Supabase), protected by row-level security so only your authenticated account can read or write your own records. Payments are processed by Stripe, which maintains its own PCI-compliant infrastructure. Transaction categorization may be processed by Anthropic's Claude API; transaction descriptions are sent for classification only.
Only you can access your ledger and bank-linked data through your authenticated session. NextUp's operator may access account-level data (email, subscription status) to provide support or maintain the Service, but does not browse individual users' financial entries without a support-related reason.
We use essential cookies/local storage to keep you signed in and remember your session. We don't use third-party advertising trackers.
We retain your data while your account is active. You can permanently delete your account at any time from Settings inside your dashboard — this immediately revokes any linked bank connections with Plaid and deletes your ledger, bank account, and transaction data. Deletion is enforced at the database level: removing an account cascades automatically through every table holding your data, so nothing is left behind. You can also request deletion by emailing billpay@nextupcapitalgroup.com. This data retention and deletion policy is reviewed at least annually, and immediately following any material change to how we handle your data.
Depending on where you live, you may have rights to access, correct, export, or delete your personal data. Contact us at the email below to exercise these rights.
We may update this policy as the Service evolves. Material changes will be reflected by an updated "Last updated" date above.
Questions about this policy or your data? Email billpay@nextupcapitalgroup.com.